topic Re: App-ID in General Topics

App-ID

jaah1231 — Sat, 27 Aug 2022 12:20:23 GMT

Good Morning,

I am currently working with a PA 3220 firewall that has no licenses. Does App-ID work right out of the box without a license? On security policies I see under the ‘apps seen’ column it is identifying apps. If you use the apps found under the apps seen column will it work? Can you update apps without a license? I was a last minute addition to this project and am trying to get up to speed. Thank you!

Re: App-ID

PavelK — Sat, 27 Aug 2022 23:36:06 GMT

Hello @jaah1231

based on my experience from scenario where Firewall did not have any support license nor subscription, it is still possible to download and install dynamic updates that are used to update app-id, however the update will only include application update not threat signatures. The official explanation is in documentation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/software-and-content-updates/app-and-threat-content-updates

The behavior you are seeing is expected and all applications are being identified through security policies.

Kind Regards

Pavel

Re: App-ID

jaah1231 — Sun, 28 Aug 2022 03:27:39 GMT

Thank you @PavelK !